Overview

overview

3

Static

static

3

4ada782bf1...ce.exe

macos-10.15-amd64

1

Resubmissions

14-09-2023 19:39

230914-yc1f9ahc54 10

01-08-2023 16:43

230801-t8b2bahg29 3

01-08-2023 16:41

230801-t7h38shf98 10

01-08-2023 16:39

230801-t51v9saf7y 10

01-08-2023 16:38

230801-t5nkyahf84 10

01-08-2023 16:38

230801-t5lfksaf6t 10

01-08-2023 16:34

230801-t24srahf35 3

01-08-2023 16:33

230801-t2wgdaaf2t 10

01-08-2023 16:09

230801-tl3whsad3w 10

Analysis

  • max time kernel
    99s
  • max time network
    125s
  • platform
    macos_amd64
  • resource
    macos-20220504-en
  • resource tags

    arch:amd64arch:i386image:macos-20220504-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    01-08-2023 16:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe

  • Size

    639KB

  • MD5

    4b9a2c82dae5a6747c9b6a635874fe1b

  • SHA1

    16849642f7562fb28a7c57493ede6dc14e71e423

  • SHA256

    4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce

  • SHA512

    3ef6541eb83fa9734b0277ba753b449f4c2f47d3f8e0b6e46cfcd0c706e0e4c91478f883b1698755351ada6dec7f463562f31f832aa23f7e84c904b3b8ff6a5d

  • SSDEEP

    12288:iMrNy90KItLD9U6csc0Wlc5ao392/gTlYQbOH8t4MhxphtwML/:XyhAlpcw391pjOYFrjr

Score
1/10

Malware Config

Signatures

Processes

  • /usr/sbin/spctl
    /usr/sbin/spctl --status
    1⤵
      PID:495
    • /bin/sh
      sh -c "sudo /bin/zsh -c \"/Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe\""
      1⤵
        PID:496
      • /bin/bash
        sh -c "sudo /bin/zsh -c \"/Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe\""
        1⤵
          PID:496
        • /bin/bash
          sh -c "sudo /bin/zsh -c \"/Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe\""
          1⤵
            PID:496
          • /usr/bin/sudo
            sudo /bin/zsh -c /Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe
            1⤵
              PID:496
            • /usr/bin/sudo
              sudo /bin/zsh -c /Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe
              1⤵
                PID:496
                • /bin/zsh
                  /bin/zsh -c /Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe
                  2⤵
                    PID:508
                  • /bin/zsh
                    /bin/zsh -c /Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe
                    2⤵
                      PID:508
                    • /Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe
                      /Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe
                      2⤵
                        PID:508
                      • /Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe
                        /Users/run/4ada782bf1a9a2fd7b1e5c351fd4ecaaafd19e9e07ae9a26847b65bf48c318ce.exe
                        2⤵
                          PID:508
                      • /usr/sbin/spctl
                        /usr/sbin/spctl --test-devid-status
                        1⤵
                          PID:507
                        • /usr/bin/syslog
                          /usr/bin/syslog -s -k com.apple.message.domain com.apple.security.assessment.current_state com.apple.message.signature "assessments enabled" com.apple.message.signature2 "devid enabled" Message "Gatekeeper state assessments enabled/devid enabled"
                          1⤵
                            PID:509

                          Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads